SECURITYQUIET
2 hours ago · Global
Stolen UpdraftCentral keys used to backdoor WordPress sites
SIGNALSMONITORSECURITY
What's happening
SignalsMonitor is following this as a security story. BleepingComputer is the outlet attached so far. The reports are tied to Global. The first report grouped here was at 21 Oct 2026, 01:01 UTC. The headline in use is “Stolen UpdraftCentral keys used to backdoor WordPress sites”. This note is SignalsMonitor's own briefing, not the publisher's article.
What we know
A threat actor breached TeamUpdraft's website, a developer of popular WordPress backup and security plugins, potentially compromising UpdraftCentral connection keys that can send commands to connected websites. [...
BleepingComputerRead at BleepingComputer
Story timeline
Reports grouped into this story, earliest first. Exact repeats from the same outlet are collapsed.
- First reported by BleepingComputer
Reported by 1 outlet
- BleepingComputer
- BleepingComputerStolen UpdraftCentral keys used to backdoor WordPress sites